leapfrog-ssl-34.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:68:bc:53:21:5a:96:94:c5:30:f4:aa:80:0a:a4:7a:c7:38 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-34.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:bc:53:21:5a:96:94:c5:30:f4:aa:80:0a:a4:7a:c7:38
Serial Number (int): 296976550455401816865354431423467390420792
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:a4:09:d5:48:e2:3c:ed:b9:5a:04:5e:1f:ce:8a:72:dd:ef:e4:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0a:9b:ce:cb:e9:98:03:de:f9:06:ef:e4:dc:b5:c5:d3:40:2a:89:b9
Fingerprint (sha256): 26:b7:48:10:9d:a0:af:1a:71:15:1a:64:29:69:e4:e5:39:1c:63:83:da:6c:1c:5d:67:f6:22:8b:03:aa:86:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-34.gcs-web.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-34.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about.allegro.eu
accolade.gcs-web.com
agenusbio.gcs-web.com
allegro.gcs-web.com
apachecorp.gcs-web.com
avidbio.gcs-web.com
bentleysystems.gcs-web.com
boltbiotherapeutics.gcs-web.com
c4therapeutics.gcs-web.com
capps.gcs-web.com
cerevel.gcs-web.com
cogentbiosciences.gcs-web.com
collectors.gcs-web.com
compasspathways.gcs-web.com
concordmedical.gcs-web.com
corsair.gcs-web.com
echostar.gcs-web.com
elpolloloco.gcs-web.com
fluidigm.gcs-web.com
greendot.gcs-web.com
harmonicinc.gcs-web.com
harmonybiosciences.gcs-web.com
houwire.gcs-web.com
iderapharmaceuticalsinc.gcs-web.com
immunogen.gcs-web.com
investor.agenusbio.com
investor.apachecorp.com
investor.apacorp.com
investor.capps.com
investor.elpolloloco.com
investor.harmonicinc.com
investor.immunogen.com
investor.neworiental.org
investor.stevemadden.com
investor.sumologic.com
investor.textainer.com
investors.bentley.com
investors.boltbio.com
investors.cerevel.com
investors.cogentbio.com
investors.collectors.com
investors.fluidigm.com
investors.jfrog.com
investors.magnachip.com
investors.mastercraft.com
investors.outsetmedical.com
investors.pxd.com
investors.shift.com
ir.accolade.com
ir.avidbio.com
ir.c4therapeutics.com
ir.ccm.cn
ir.compasspathways.com
ir.corsair.com
ir.echostar.com
ir.greendot.com
ir.harmonybiosciences.com
ir.houwire.com
ir.iderapharma.com
ir.pmvpharma.com
ir.qudian.com
ir.tattooedchef.com
ir.vivus.com
ir.xin.com
ir.yield10bio.com
ir.zosanopharma.com
jfrog.gcs-web.com
leapfrog-ssl-34.gcs-web.com
magnachipsemiconductorcorp.gcs-web.com
mcbcholdingsinc.gcs-web.com
neworientaleducationandtechnologygroupinc.gcs-web.com
outsetmedicalinc.gcs-web.com
pioneernaturalresourcescompany.gcs-web.com
pmvpharma.gcs-web.com
qudianinc.gcs-web.com
shareholders.stepstoneglobal.com
shareholders.stepstonegroup.com
shift.gcs-web.com
stepstonegroupinc.gcs-web.com
stevemadden.gcs-web.com
sumologic.gcs-web.com
tattooedchef.gcs-web.com
textainergroupholdingsltd.gcs-web.com
uxinlimited.gcs-web.com
vivusinc.gcs-web.com
yield10bioscienceinc.gcs-web.com
zosanopharmacorporation.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-34.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05SZYMxj1M/QbNonm/jR
pES67XAio6DRzDUKVuUiM887FMd+RL7Q/QpKBMOlrUOok99ZBAQSv3zwglsPxhR0
mOzAcshhxhY03Jfbbyaimb7szzv0X6OBtEr4oklmadqjoUYUix8i7BOBCq1l3daT
XzxSZ/Vb9Fl79ilndTAuRaKAGm/A9Bhz/W6tKpg/32QDyTfrVTLPAZGjwmOixDPd
c7/yNDDj/OzwpMj/DRB/dlEbrF4YqibOL5IZEP9JRUbBcBG66k+GtZJTdJpIPRQW
AB/CtR2+UuDqPAFE0gYfyVTLNTV9LhUWcEeSh2+QsaQrw9JB6f4FKoZg8jTQocjt
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296976550455401816865354431423467390420792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-19 08:56:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-17 08:56:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-34.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26709559311526770726016204452728529501981176417185343918262953566840685750112524660229997727822764808609071566502797933451551937673832184159532404611185297653459120975514503229207089339124237108901935619203128886738875890300796151625844039950939096658744195220397134840733642264777781414031048778916250716171836199804686334656201341955557047689838332443786281705906873167960363038904270656133299793285363357758057678938771879476646372782255880533378154179104087314114921240376378714754881071847436222074180955931920139386353696683445846790172451906404040889953011288063213411700252624830692204365070233060144803540331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fa409d548e23cedb95a045e1fce8a72ddefe4b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.allegro.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accolade.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apachecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentleysystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boltbiotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4therapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerevel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogentbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compasspathways.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concordmedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echostar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpolloloco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidigm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greendot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonicinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonybiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houwire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iderapharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.agenusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.apachecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.apacorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.capps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.elpolloloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.harmonicinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.immunogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.neworiental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.stevemadden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sumologic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.textainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bentley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.boltbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cerevel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cogentbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.collectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fluidigm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.magnachip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mastercraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.outsetmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pxd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.shift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.accolade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avidbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.c4therapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ccm.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.compasspathways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.corsair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.echostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greendot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.harmonybiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.houwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iderapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pmvpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qudian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tattooedchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vivus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yield10bio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zosanopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfrog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-34.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnachipsemiconductorcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcbcholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworientaleducationandtechnologygroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsetmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneernaturalresourcescompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmvpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qudianinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.stepstoneglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.stepstonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shift.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepstonegroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevemadden.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumologic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattooedchef.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textainergroupholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxinlimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivusinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yield10bioscienceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zosanopharmacorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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